Privacy Policy

Information we collect

• Account information: When you sign in with Google, LinkedIn, Microsoft, or email/password, we collect your name, email address, and profile picture (if provided by the OAuth provider). We do not store your OAuth provider passwords.
• Profile data: Username, display name, bio, job titles, portfolio works, social links, and any other information you choose to add to your wordbound profile.
• Content: Written works, portfolios, descriptions, and any files you upload to showcase your narrative craft.
• Usage data: Page views, device type, browser information, and interaction events to help us improve the platform.
• Cookies: Authentication tokens stored in secure, httpOnly cookies to keep you signed in.

How we use your data

• Authenticate you and maintain secure sessions using OAuth tokens.
• Display your portfolio and works to visitors and potential collaborators.
• Provide core features like work uploads, profile customization, and portfolio sharing.
• Send verification emails when you sign up with email/password authentication.
• Improve platform performance, fix bugs, and plan new features.
• Communicate important service updates or security notices.

We do not: Sell your data, use it for advertising, train AI models on your content, or share it with third parties except as described in this policy.

Third-party services

We use trusted service providers to operate wordbound. These providers only access data necessary to perform their functions:

• Authentication: Google, LinkedIn, Microsoft OAuth for sign-in.
• Email delivery: Resend for verification codes and important notifications.
• Hosting: Self-hosted infrastructure (Convex, Coolify) for data storage.

We do not sell your personal information. Service providers are contractually required to protect your data and use it only for the services they provide to us.

Data retention & deletion

We retain your account and portfolio data for as long as your account is active. You have the right to:

• Delete your account: Request permanent deletion of your account and all associated data.
• Export your data: Request a copy of your profile and works in portable format.
• Update your information: Edit your profile, works, and account details at any time.

Upon account deletion, your data is immediately removed from our active systems. Backups may persist for up to 30 days before permanent deletion. Published works may remain cached in search engines temporarily.

Security

We employ industry-standard safeguards, including encrypted network connections (HTTPS), role-based internal access, and continuous monitoring. No online service can guarantee absolute security, but we work hard to protect your data and promptly address vulnerabilities.

Your rights (GDPR & CCPA)

If you are in the European Union, EEA, UK, or California, you have additional rights under GDPR and CCPA:

• Access: Request a copy of your personal data we hold.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in machine-readable format.
• Object: Object to processing of your data for specific purposes.
• Restrict: Request limitation on how we use your data.

To exercise these rights, contact us at support@wordbound.app.

International data transfers

wordbound is operated from the United States. If you access our service from outside the U.S., your data may be transferred to and processed in the U.S. We implement appropriate safeguards to protect your data in accordance with applicable privacy laws.

Children's privacy

wordbound is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Contact us

For questions, data requests, or privacy concerns, contact us at:

• Email: support@wordbound.app
• Data Protection: flagrare@wordbound.app